build(deps-dev): bump parse-server from 2.8.4 to 6.2.2

[dependabot[bot]]

Bumps parse-server from 2.8.4 to 6.2.2.

Release notes

Sourced from parse-server's releases.

6.2.2

6.2.2 (2023-09-04)

Bug Fixes

• Parse Pointer allows to access internal Parse Server classes and circumvent beforeFind query trigger; fixes security vulnerability GHSA-fcv6-fg5r-jm9q (be4c7e2) (#8733)

6.2.1

6.2.1 (2023-06-28)

Bug Fixes

• Remote code execution via MongoDB BSON parser through prototype pollution; fixes security vulnerability GHSA-462x-c3jw-7vr6 (#8674) (3dd99dd)

6.2.0

6.2.0 (2023-05-20)

Features

• Add new Parse Server option fileUpload.fileExtensions to restrict file upload by file extension; this fixes a security vulnerability in which a phishing attack could be performed using an uploaded HTML file; by default the new option only allows file extensions matching the regex pattern ^[^hH][^tT][^mM][^lL]?$, which excludes HTML files; if your app currently depends on uploading files with HTML file extensions then this may be a breaking change and you could allow HTML file upload by setting the option to ['.*'] (#8538) (a318e7b)

6.1.0

6.1.0 (2023-05-01)

Bug Fixes

• LiveQuery can return incorrectly formatted date (#8456) (4ce135a)
• Nested date is incorrectly decoded as empty object {} when fetching a Parse Object (#8446) (22d2446)
• Parameters missing in afterFind trigger of authentication adapters (#8458) (ce34747)
• Rate limiting across multiple servers via Redis not working (#8469) (d9e347d)
• Security upgrade jsonwebtoken to 9.0.0 (#8420) (f5bfe45)

Features

• Add afterFind trigger to authentication adapters (#8444) (c793bb8)
• Add option schemaCacheTtl for schema cache pulling as alternative to enableSchemaHooks (#8436) (b3b76de)
• Add Parse Server option resetPasswordSuccessOnInvalidEmail to choose success or error response on password reset with invalid email (#7551) (e5d610e)
• Add rate limiting across multiple servers via Redis (#8394) (34833e4)
• Allow multiple origins for header Access-Control-Allow-Origin (#8517) (4f15539)
• Deprecate LiveQuery fields option in favor of keys for semantic consistency (#8388) (a49e323)
• Export AuthAdapter to make it available for extension with custom authentication adapters (#8443) (40c1961)

6.1.0-beta.2

6.1.0-beta.2 (2023-05-01)

... (truncated)

Commits

• d141b82 chore(release): 6.2.2 [skip ci]
• be4c7e2 fix: Parse Pointer allows to access internal Parse Server classes and circumv...
• 3289181 chore(release): 6.2.1 [skip ci]
• 3dd99dd fix: Remote code execution via MongoDB BSON parser through prototype pollutio...
• 1506273 chore(release): 6.2.0 [skip ci]
• a318e7b feat: Add new Parse Server option fileUpload.fileExtensions to restrict fil...
• 832702d chore(release): 6.1.0 [skip ci]
• 18b63d1 build: Release (#8526)
• f59d46c chore(release): 6.1.0-beta.2 [skip ci]
• acba5cf build: Release beta (#8525)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by parseadmin, a new releaser for parse-server since your current version.

Most Recent Ignore Conditions Applied to This Pull Request

| Dependency Name | Ignore Conditions | | --- | --- | | parse-server | [>= 4.a, < 5] |

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #477.